17 lines
615 B
TypeScript
17 lines
615 B
TypeScript
import path from "node:path";
|
|
import { describe, expect, it } from "vitest";
|
|
import { isWithinDir, resolveSafeBaseDir } from "./path-safety.js";
|
|
|
|
describe("path-safety", () => {
|
|
it("resolves safe base dir with trailing separator", () => {
|
|
const base = resolveSafeBaseDir("/tmp/demo");
|
|
expect(base.endsWith(path.sep)).toBe(true);
|
|
});
|
|
|
|
it("checks directory containment", () => {
|
|
expect(isWithinDir("/tmp/demo", "/tmp/demo")).toBe(true);
|
|
expect(isWithinDir("/tmp/demo", "/tmp/demo/sub/file.txt")).toBe(true);
|
|
expect(isWithinDir("/tmp/demo", "/tmp/demo/../escape.txt")).toBe(false);
|
|
});
|
|
});
|